<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="Content-Type" content=
    "application/xhtml+xml; charset=iso-8859-1" />
    <title>
      keyutils-1.6.1
    </title>
    <link rel="stylesheet" type="text/css" href="../stylesheets/lfs.css" />
    <meta name="generator" content="DocBook XSL Stylesheets V1.78.1" />
    <link rel="stylesheet" href="../stylesheets/lfs-print.css" type=
    "text/css" media="print" />
  </head>
  <body class="blfs" id="blfs-2020-04-02">
    <div class="navheader">
      <h4>
        Beyond Linux<sup>�</sup> From Scratch <span class="phrase">(System
        V</span> Edition) - Version 2020-04-02
      </h4>
      <h3>
        Chapter&nbsp;9.&nbsp;General Libraries
      </h3>
      <ul>
        <li class="prev">
          <a accesskey="p" href="json-glib.html" title=
          "JSON-GLib-1.4.4">Prev</a>
          <p>
            JSON-GLib-1.4.4
          </p>
        </li>
        <li class="next">
          <a accesskey="n" href="libaio.html" title="libaio-0.3.112">Next</a>
          <p>
            libaio-0.3.112
          </p>
        </li>
        <li class="up">
          <a accesskey="u" href="genlib.html" title=
          "Chapter&nbsp;9.&nbsp;General Libraries">Up</a>
        </li>
        <li class="home">
          <a accesskey="h" href="../index.html" title=
          "Beyond Linux� From Scratch     (System V Edition) - Version 2020-04-02">
          Home</a>
        </li>
      </ul>
    </div>
    <div class="sect1" lang="en" xml:lang="en">
      <h1 class="sect1">
        <a id="keyutils" name="keyutils"></a>keyutils-1.6.1
      </h1>
      <div class="package" lang="en" xml:lang="en">
        <h2 class="sect2">
          Introduction to keyutils
        </h2>
        <p>
          <span class="application">Keyutils</span> is a set of utilities for
          managing the key retention facility in the kernel, which can be
          used by filesystems, block devices and more to gain and retain the
          authorization and encryption keys required to perform secure
          operations.
        </p>
        <p>
          This package is known to build and work properly using an LFS-9.1
          platform.
        </p>
        <h3>
          Package Information
        </h3>
        <div class="itemizedlist">
          <ul class="compact">
            <li class="listitem">
              <p>
                Download (HTTP): <a class="ulink" href=
                "http://people.redhat.com/~dhowells/keyutils/keyutils-1.6.1.tar.bz2">
                http://people.redhat.com/~dhowells/keyutils/keyutils-1.6.1.tar.bz2</a>
              </p>
            </li>
            <li class="listitem">
              <p>
                Download MD5 sum: 919af7f33576816b423d537f8a8692e8
              </p>
            </li>
            <li class="listitem">
              <p>
                Download size: 96 KB
              </p>
            </li>
            <li class="listitem">
              <p>
                Estimated disk space required: 1.9 MB (with tests)
              </p>
            </li>
            <li class="listitem">
              <p>
                Estimated build time: less than 0.1 SBU (add 0.6 SBU for
                tests)
              </p>
            </li>
          </ul>
        </div>
        <h3>
          keyutils Dependencies
        </h3>
        <h4>
          Required
        </h4>
        <p class="required">
          <a class="xref" href="../postlfs/mitkrb.html" title=
          "MIT Kerberos V5-1.18">MIT Kerberos V5-1.18</a>
        </p>
        <p class="usernotes">
          User Notes: <a class="ulink" href=
          "http://wiki.linuxfromscratch.org/blfs/wiki/keyutils">http://wiki.linuxfromscratch.org/blfs/wiki/keyutils</a>
        </p>
      </div>
      <div class="installation" lang="en" xml:lang="en">
        <h2 class="sect2">
          Installation of keyutils
        </h2>
        <p>
          Install <span class="application">keyutils</span> by running the
          following commands:
        </p>
        <pre class="userinput">
<kbd class="command">make</kbd>
</pre>
        <p>
          To test the results, issue, as the <code class=
          "systemitem">root</code> user:
        </p>
        <pre class="root">
<kbd class="command">sed -i '/find/s:/usr/bin/::' tests/Makefile &amp;&amp;
make -k test </kbd>
</pre>
        <p>
          Note that several tests will fail if certain uncommon kernel
          options were not used when the kernel was built. These include
          CONFIG_BIG_KEYS, CONFIG_KEY_DH_OPERATIONS, and CONFIG_CRYPTO_DH.
        </p>
        <p>
          Now, as the <code class="systemitem">root</code> user:
        </p>
        <pre class="root">
<kbd class="command">make NO_ARLIB=1 install</kbd>
</pre>
      </div>
      <div class="commands" lang="en" xml:lang="en">
        <h2 class="sect2">
          Command Explanations
        </h2>
        <p>
          <em class="parameter"><code>NO_ARLIB=1</code></em>: This make flag
          disables installing the static library.
        </p>
      </div>
      <div class="configuration" lang="en" xml:lang="en">
        <h2 class="sect2">
          Configuring keyutils
        </h2>
        <div class="sect3" lang="en" xml:lang="en">
          <h3 class="sect3">
            <a id="keyutils-config" name="keyutils-config"></a>
          </h3>
          <h4 class="title">
            <a id="keyutils-config" name="keyutils-config"></a>Config Files
          </h4>
          <p>
            <code class="filename">/etc/request-key.conf</code> and
            <code class="filename">/etc/request-key.d/*</code>
          </p>
        </div>
      </div>
      <div class="content" lang="en" xml:lang="en">
        <h2 class="sect2">
          Contents
        </h2>
        <div class="segmentedlist">
          <div class="seglistitem">
            <div class="seg">
              <strong class="segtitle">Installed Programs:</strong>
              <span class="segbody">keyctl, key.dns_resolver, and
              request-key</span>
            </div>
            <div class="seg">
              <strong class="segtitle">Installed Library:</strong>
              <span class="segbody">libkeyutils.so</span>
            </div>
            <div class="seg">
              <strong class="segtitle">Installed Directory:</strong>
              <span class="segbody">/etc/request-key.d and
              /usr/share/keyutils</span>
            </div>
          </div>
        </div>
        <div class="variablelist">
          <h3>
            Short Descriptions
          </h3>
          <table border="0" class="variablelist">
            <colgroup>
              <col align="left" valign="top" />
              <col />
            </colgroup>
            <tbody>
              <tr>
                <td>
                  <p>
                    <a id="keyctl" name="keyctl"></a><span class=
                    "term"><span class=
                    "command"><strong>keyctl</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    controls the key management facility with a variety of
                    subcommands.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="key.dns_resolver" name=
                    "key.dns_resolver"></a><span class="term"><span class=
                    "command"><strong>key.dns_resolver</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    is invoked by <span class=
                    "command"><strong>request-key</strong></span> on behalf
                    of the kernel when kernel services (such as NFS, CIFS and
                    AFS) need to perform a hostname lookup and the kernel
                    does not have the key cached. It is not ordinarily
                    intended to be called directly.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="request-key" name="request-key"></a><span class=
                    "term"><span class=
                    "command"><strong>request-key</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    is invoked by the kernel when the kernel is asked for a
                    key that it doesn't have immediately available. The
                    kernel creates a temporary key and then calls out to this
                    program to instantiate it. It is not intended to be
                    called directly.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="libkeyutils" name="libkeyutils"></a><span class=
                    "term"><code class=
                    "filename">libkeyutils.so</code></span>
                  </p>
                </td>
                <td>
                  <p>
                    contains the keyutils library API instantiation.
                  </p>
                </td>
              </tr>
            </tbody>
          </table>
        </div>
      </div>
      <p class="updated">
        Last updated on 2020-03-10 09:12:43 -0500
      </p>
    </div>
    <div class="navfooter">
      <ul>
        <li class="prev">
          <a accesskey="p" href="json-glib.html" title=
          "JSON-GLib-1.4.4">Prev</a>
          <p>
            JSON-GLib-1.4.4
          </p>
        </li>
        <li class="next">
          <a accesskey="n" href="libaio.html" title="libaio-0.3.112">Next</a>
          <p>
            libaio-0.3.112
          </p>
        </li>
        <li class="up">
          <a accesskey="u" href="genlib.html" title=
          "Chapter&nbsp;9.&nbsp;General Libraries">Up</a>
        </li>
        <li class="home">
          <a accesskey="h" href="../index.html" title=
          "Beyond Linux� From Scratch     (System V Edition) - Version 2020-04-02">
          Home</a>
        </li>
      </ul>
    </div>
  </body>
</html>
